Security Scan Report: proposal.mak-ts.com

Submitted: Completed: publiccompleted
This website contacted 1 IP in 1 country across 1 domain to perform 3 HTTP transactions. The main domain is mak-ts.com and was registered 6 months ago.

Submitted URL: https://proposal.mak-ts.com/overview/secureshare.html

AI Security Verdict

High Risk

Confidence: 86%

8
Risk Score

Fake DocuSign envelope page on a non-DocuSign domain that harvests the recipient's email address and a relayed verification code; treat as brand-impersonation phishing and do not interact.

Risk Factors (5)
Impersonation of DocuSign brand on an unrelated, non-official domain
Deceptive email-address and verification-code collection flow (credential/OTP harvesting)
Fabricated access-denied errors and expiring-session timer used as pressure tactics
Domain registered ~165 days ago and absent from Cisco Umbrella top 1M despite claiming a major brand
Navigation link 'DocuSign' points only to '#' — no real brand destination
Domain age information unavailable

Details

Page Title

DocuSign – Review Document

Scan Type

public

Domain Name Analysis

The domain 'proposal.mak-ts.com' uses the commercial generic top-level domain (.com) with subdomain 'proposal'. The core label 'mak-ts' covers 6 characters split between 1 vowel and four consonants, plus 1 hyphen. Breaking it apart gives 2 words: mak, ts. Median word length is 2.5 characters. No strong language cues emerged from the frequency lists.

Screenshot

8 DocuSign Help & Support EA ENVELOPE Review Document \2 You have received a document that requires your review and signature. Confirm your email address to open the Service_Agreement.pdf envelope...

Page Load Overview

1.62s
Total Load Time
10 KB
Total Size

Language Analysis

Primary Language

🇺🇸English
Code: en
Confidence:80%
Script:Latin
Direction:ltr

Detection Details

HTML Lang Attribute:en
Text Length:1,458 chars
Detector Agreement:100%

Website Classification

Primary Category

documentation technical54% confidence
Type: static
Method: ml+structural+ocr_tiebreaker

All Detected Categories

documentation technical
54%
government public service
50%
technology software
43%

Detected Features

No structural features detected

Domain & IP Information

RequestsIP AddressLocationAS Autonomous System
374.124.194.57United States
AS22611InMotion Hosting, Inc.
31--

Detected Technologies1

Content Similarity HashesFor malware variant detection

TLSH (Trend Micro Locality Sensitive Hash)

Security-focused

Specialized for malware detection and similarity analysis

T1E2A2626662F71026785381697BAA575B3364E043D10EC5293FCC2398CFCA9DAAC7379C

ssdeep (Context Triggered Piecewise Hashing)

Context-aware

Detects similar content even with modifications

384:BrkJ+D0gR3hqzo1pg9e7Rc845esLwO3AAVtXS:uJMRxseDWeAwOQAVtC

sdhash (Similarity Digest Hashing)

High-precision

High-precision similarity detection for forensic analysis

sdhash:3:23037:BS1STmwCupECoRJBk4dJQC8AMaMMIiJAog0UQABYEEBASBRDQdJMPDANGNQqHglpzEAwCAYIBgpgoJ3QBCQBFUchwoYPs4Qa

These hashes enable detection of similar websites and malware variants by comparing content similarity even when exact matches aren't found.

Image Hashes

Perceptual Hashes

Average Hash:7fffcfcff3c3cfff
Perceptual Hash:b4999b6666993964
Difference Hash:9060999d66061a48
Wavelet Hash:7fc3cfc7c0c4c0e0
Color Hash:N/A

Other Hashes

Scan History

Scan history not available

Unable to load historical scan data